The UK is set to ban techniques that rely on weak passwords like ‘admin’ or ‘12345’ under new legislation that mandates minimum security standards for all smart devices.
The Department of Science, Innovation, and Technology has announced that starting Monday, measures will be put in place to safeguard consumers from hacking and cyber-attacks.
This requirement entails manufacturers of smartphones, TVs, and smart doorbells to ensure that internet-connected devices are protected against cybercriminal activities, and users are mandated to change their commonly-used passwords.
To enhance transparency, brands must make their contact information public for bug reporting and issue resolution, and disclose the schedule for security updates.
These new regulations aim to empower customers to purchase and utilize products confidently amidst the rising threat of cyber-attacks on consumers and businesses.
Consumer watchdog Which? played a crucial role in advocating for these changes and expressing support for the new regulations.
Rocio Concha, Director of Policy and Advocacy at Which?, emphasized the importance of companies providing clear guidance to the industry and taking strict enforcement action against law-breaking manufacturers while ensuring a customer-centric approach.
Jonathan Berry, Minister for Science and Technology, highlighted the significance of protecting connected devices from cyber threats and ensuring the safety of personal data and financial information.
The legislation falls under the Product Security and Telecommunications Infrastructure (PSTI) regime, which aims to bolster the UK’s resilience against cybercrime and establish a safer online environment.
Source: www.theguardian.com